Web Security Insights By Maloy Roy Orko

CVE-2025-9736 - O2OA Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-9736 Published : Aug. 31, 2025, 4:15 p.m. | 2 hours, 29 minutes ago Descri…

CVE-2025-9735 - O2OA Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-9735 Published : Aug. 31, 2025, 4:15 p.m. | 2 hours, 29 minutes ago Descri…

CVE-2025-9695 - GalleryVault Android Improper Component Export Vulnerability

CVE ID : CVE-2025-9695 Published : Aug. 30, 2025, 4:15 p.m. | 2 hours, 26 minutes ago Descri…

CVE-2025-30267 - QNAP QTS NULL Pointer Denial-of-Service Vulnerability

CVE ID : CVE-2025-30267 Published : Aug. 29, 2025, 6:15 p.m. | 23 minutes ago Description : …

CVE-2025-30264 - QNAP QTS Command Injection Vulnerability

CVE ID : CVE-2025-30264 Published : Aug. 29, 2025, 6:15 p.m. | 23 minutes ago Description : …

CVE-2025-31979 - HCL BigFix SM File Upload Validation Bypass

CVE ID : CVE-2025-31979 Published : Aug. 28, 2025, 5:15 p.m. | 1 hour, 12 minutes ago Descri…

CVE-2025-31977 - HCL BigFix SM Cryptographic Weakness

CVE ID : CVE-2025-31977 Published : Aug. 28, 2025, 5:15 p.m. | 1 hour, 12 minutes ago Descri…

CVE-2025-31972 - HCL BigFix SM Sensitive Information Exposure

CVE ID : CVE-2025-31972 Published : Aug. 28, 2025, 5:15 p.m. | 1 hour, 12 minutes ago Descri…

CVE-2025-50978 - Gitblit Reflected Cross-Site Scripting (XSS) Vulnerability

CVE ID : CVE-2025-50978 Published : Aug. 27, 2025, 4:15 p.m. | 2 hours, 8 minutes ago Descri…

CVE-2025-1994 - IBM Cognos Command Center Deserialization Vulnerability

CVE ID : CVE-2025-1994 Published : Aug. 26, 2025, 5:15 p.m. | 1 hour, 3 minutes ago Descript…

CVE-2025-1494 - IBM Cognos Command Center Clickjacking Vulnerability

CVE ID : CVE-2025-1494 Published : Aug. 26, 2025, 5:15 p.m. | 1 hour, 3 minutes ago Descript…

Real Estate Management System V 1.0 | /admin/userlist.php | Broken Access Control| Found By Maloy Roy Orko

Hi   all, I am Maloy Roy Orko. Recently,in one of my pentest research,I found a web application …

Real Estate Management System V 1.0 | User Image Upload - register.php | Remote Code Execution| Found By Maloy Roy Orko

Hi All,  I am Maloy Roy Orko. CVE Number: In Review CWE : 94 Recently in one of my pentest resea…

CVE-2025-29420 - PerfreeBlog Directory Traversal Vulnerability

CVE ID : CVE-2025-29420 Published : Aug. 25, 2025, 5:15 p.m. | 5 hours, 6 minutes ago Descri…

CVE-2025-9394 - PoDoFo PDF Dictionary Parser Use After Free Vulnerability

CVE ID : CVE-2025-9394 Published : Aug. 24, 2025, 4:15 p.m. | 1 hour, 44 minutes ago Descrip…

CVE-2025-9393 - "Linksys RE Series Stack-Based Buffer Overflow Vulnerability"

CVE ID : CVE-2025-9393 Published : Aug. 24, 2025, 4:15 p.m. | 1 hour, 44 minutes ago Descrip…

CVE-2025-9392 - Linksys Wireless Router Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-9392 Published : Aug. 24, 2025, 3:15 p.m. | 2 hours, 44 minutes ago Descri…

CVE-2025-9391 - Bjskzy Zhiyou ERP SQL Injection

CVE ID : CVE-2025-9391 Published : Aug. 24, 2025, 3:15 p.m. | 2 hours, 44 minutes ago Descri…

CVE-2025-9379 - "Belkin AX1800 Firmware Update Handler Remote Authentication Bypass"

CVE ID : CVE-2025-9379 Published : Aug. 24, 2025, 7:15 a.m. | 2 hours, 8 minutes ago Descrip…

CVE-2025-8208 - Spexo Addons for Elementor WordPress Stored Cross-Site Scripting

CVE ID : CVE-2025-8208 Published : Aug. 24, 2025, 6:15 a.m. | 1 hour, 7 minutes ago Descript…

CVE-2025-36174 - IBM Integrated Analytics System File Upload Arbitrary Code Execution Vulnerability

CVE ID : CVE-2025-36174 Published : Aug. 24, 2025, 2:15 a.m. | 28 minutes ago Description : …

CVE-2025-36157 - IBM Jazz Foundation Unauthorized File Update Vulnerability

CVE ID : CVE-2025-36157 Published : Aug. 24, 2025, 2:15 a.m. | 28 minutes ago Description : …

CVE-2025-38666 - AppleTalk Linux Kernel Appletalk AARP Race Condition Use-After-Free

CVE-2025-38665 - Linux Kernel CAN NULL Pointer Dereference Vulnerability

CVE ID : CVE-2025-38665 Published : Aug. 22, 2025, 4:15 p.m. | 41 minutes ago Description : …

CVE-2025-43756 - Liferay Portal Liferay DXP Reflected Cross-Site Scripting (XSS) Vulnerability

CVE ID : CVE-2025-43756 Published : Aug. 21, 2025, 5:15 p.m. | 1 hour, 38 minutes ago Descri…

CVE-2025-43755 - Liferay Portal Stored Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-43755 Published : Aug. 21, 2025, 5:15 p.m. | 1 hour, 38 minutes ago Descri…

CVE-2025-20269 - Cisco EPNM and Prime Infrastructure HTTP Request Validation Bypass Vulnerability

CVE ID : CVE-2025-20269 Published : Aug. 20, 2025, 5:15 p.m. | 52 minutes ago Description : …

CVE-2025-20131 - Cisco ISE GUI File Upload Vulnerability (Arbitrary File Upload)

CVE ID : CVE-2025-20131 Published : Aug. 20, 2025, 5:15 p.m. | 52 minutes ago Description : …

CVE-2025-38600 - "Qualcomm Atheros WiFi Off-By-One Array Indexing Vulnerability"

CVE ID : CVE-2025-38600 Published : Aug. 19, 2025, 5:15 p.m. | 54 minutes ago Description : …

CVE-2025-38598 - AMDGPU Use-After-Free Vulnerability

CVE-2025-3639 - Liferay Portal Authentication Bypass

CVE ID : CVE-2025-3639 Published : Aug. 18, 2025, 5:15 p.m. | 53 minutes ago Description : …

CVE-2025-54118 - NamelessMC Unauthenticated Sensitive Information Disclosure

CVE ID : CVE-2025-54118 Published : Aug. 18, 2025, 4:15 p.m. | 1 hour, 53 minutes ago Descri…

CVE-2025-54117 - NamelessMC Cross-Site Scripting (XSS) Vulnerability

CVE ID : CVE-2025-54117 Published : Aug. 18, 2025, 4:15 p.m. | 1 hour, 53 minutes ago Descri…

Chatbox 1.0 | chat.php?user_id= SQL Injection | Found By Maloy Roy Orko

Hi All,  I am Maloy Roy Orko . CVE Number: In Review CWE: 89 Recently in one of my pentest resea…

CVE-2025-7342 - Kubernetes Image Builder Default Credentials Vulnerability

CVE ID : CVE-2025-7342 Published : Aug. 17, 2025, 11:15 p.m. | 50 minutes ago Description : …

CVE-2025-9093 - BuzzFeed App Android Improper Component Export Vulnerability

CVE ID : CVE-2025-9093 Published : Aug. 17, 2025, 10:15 p.m. | 1 hour, 50 minutes ago Descri…

CVE-2025-9090 - Tenda Telnet Service Command Injection

CVE ID : CVE-2025-9090 Published : Aug. 17, 2025, 3:15 a.m. | 49 minutes ago Description : …

CVE-2025-9089 - Tenda AC20 Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-9089 Published : Aug. 17, 2025, 12:15 a.m. | 1 hour, 48 minutes ago Descri…

CVE-2025-9088 - Tenda AC20 Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-9088 Published : Aug. 16, 2025, 11:15 p.m. | 48 minutes ago Description : …

CVE-2025-9087 - Tenda AC20 Stack-Based Buffer Overflow

CVE ID : CVE-2025-9087 Published : Aug. 16, 2025, 11:15 p.m. | 48 minutes ago Description : …

CVE-2025-49897 - Gopiplus Vertical Scroll Slideshow Gallery SQL Injection

CVE ID : CVE-2025-49897 Published : Aug. 15, 2025, 4:15 p.m. | 1 hour, 45 minutes ago Descri…

CVE-2025-49432 - FWDesign Ultimate Video Player Missing Authorization Vulnerability

CVE ID : CVE-2025-49432 Published : Aug. 15, 2025, 4:15 p.m. | 1 hour, 45 minutes ago Descri…

CVE-2025-20254 - Cisco Secure Firewall ASA/FTD IKEv2 Packet Parsing Denial of Service

CVE ID : CVE-2025-20254 Published : Aug. 14, 2025, 5:15 p.m. | 1 hour, 28 minutes ago Descri…

Online Cyber Security Quiz 2025

Get Certificates And Recognition For Your Knowledge! 👨‍💻 Monthly QUIZ Date : September 1,2025 …

CVE-2025-23303 - NVIDIA NeMo Framework Remote Code Execution (RCE)

CVE ID : CVE-2025-23303 Published : Aug. 13, 2025, 6:15 p.m. | 26 minutes ago Description : …

CVE-2025-53734 - Microsoft Office Visio Use-After-Free Remote Code Execution Vulnerability

CVE ID : CVE-2025-53734 Published : Aug. 12, 2025, 6:15 p.m. | 23 minutes ago Description : …

CVE-2025-53733 - Microsoft Office Word Integer Overflow Remote Code Execution Vulnerability

CVE ID : CVE-2025-53733 Published : Aug. 12, 2025, 6:15 p.m. | 23 minutes ago Description : …

CVE-2025-25231 - VMware Workspace ONE UEM Path Traversal Information Disclosure

CVE ID : CVE-2025-25231 Published : Aug. 11, 2025, 6:15 p.m. | 20 minutes ago Description : …

CVE-2025-8866 - YugabyteDB Anywhere Authentication Bypass

CVE ID : CVE-2025-8866 Published : Aug. 11, 2025, 5:15 p.m. | 1 hour, 20 minutes ago Descrip…

CVE-2025-8818 - Linksys Wi-Fi Router OS Command Injection Vulnerability

CVE ID : CVE-2025-8818 Published : Aug. 10, 2025, 11:15 p.m. | 1 hour, 18 minutes ago Descri…

CVE-2025-8817 - Linksys RE Series Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-8817 Published : Aug. 10, 2025, 10:15 p.m. | 17 minutes ago Description : …

CVE-2025-8763 - Ruijie EG306MG StrongSwan Aggressive Mode PSK Encryption Bypass Vulnerability

CVE ID : CVE-2025-8763 Published : Aug. 9, 2025, 6:15 p.m. | 2 hours, 14 minutes ago Descrip…

CVE-2025-8758 - TRENDnet TEW-822DRE FTP Server Local Privilege Escalation Vulnerability

CVE ID : CVE-2025-8758 Published : Aug. 9, 2025, 4:15 p.m. | 2 hours, 14 minutes ago Descrip…

CVE-2025-46414 - Apache IoT Device PIN Brute-Force Weakness

CVE ID : CVE-2025-46414 Published : Aug. 8, 2025, 5:15 p.m. | 2 hours, 5 minutes ago Descrip…

CVE-2025-50952 - OpenJPEG NULL Pointer Dereference Vulnerability

CVE ID : CVE-2025-50952 Published : Aug. 7, 2025, 3:15 p.m. | 2 hours ago Description : ope…

CVE-2025-47188 - Mitel SIP Phones Command Injection Vulnerability

CVE ID : CVE-2025-47188 Published : Aug. 7, 2025, 3:15 p.m. | 2 hours ago Description : A v…

CVE-2024-52885 - Fortinet Mobile Access Portal Directory Traversal Vulnerability

CVE ID : CVE-2024-52885 Published : Aug. 6, 2025, 3:15 p.m. | 1 hour, 58 minutes ago Descrip…

CVE-2025-43978 - Jointelli 5G CPE OS Command Injection Vulnerability

CVE ID : CVE-2025-43978 Published : Aug. 5, 2025, 5:15 p.m. | 1 hour, 56 minutes ago Descrip…

CVE-2025-44954 - RUCKUS SmartZone SSH Private Key Hardcoded Vulnerability

CVE ID : CVE-2025-44954 Published : Aug. 4, 2025, 5:15 p.m. | 1 hour, 51 minutes ago Descrip…

CVE-2025-20697 - Qualcomm Power HAL Out-of-Bounds Write Privilege Escalation

CVE ID : CVE-2025-20697 Published : Aug. 4, 2025, 2:15 a.m. | 51 minutes ago Description : …

CVE-2025-20696 - Dell Authentication Agent Out-of-Bounds Write Vulnerability

CVE ID : CVE-2025-20696 Published : Aug. 4, 2025, 2:15 a.m. | 51 minutes ago Description : …

CVE-2025-54956 - Gh R Unauthorized Information Disclosure

CVE ID : CVE-2025-54956 Published : Aug. 3, 2025, 6:15 p.m. | 51 minutes ago Description : …

CVE-2025-23276 - NVIDIA Installer for Windows Privilege Escalation Vulnerability

CVE ID : CVE-2025-23276 Published : Aug. 2, 2025, 10:15 p.m. | 50 minutes ago Description : …

CVE-2025-8471 - Projectworlds Online Admission System SQL Injection

CVE ID : CVE-2025-8471 Published : Aug. 2, 2025, 7:15 p.m. | 1 hour, 50 minutes ago Descript…

CVE-2025-8470 - SourceCodester Online Hotel Reservation System SQL Injection Vulnerability

CVE ID : CVE-2025-8470 Published : Aug. 2, 2025, 6:15 p.m. | 50 minutes ago Description : A…

CVE-2025-8469 - SourceCodester Online Hotel Reservation System SQL Injection Vulnerability

CVE ID : CVE-2025-8469 Published : Aug. 2, 2025, 5:15 p.m. | 1 hour, 50 minutes ago Descript…

CVE-2025-53010 - MaterialX Null Pointer Dereference Denial of Service

CVE ID : CVE-2025-53010 Published : Aug. 1, 2025, 6:15 p.m. | 49 minutes ago Description : …

CVE-2025-53009 - MaterialX Stack Exhaustion Crash Vulnerability

CVE ID : CVE-2025-53009 Published : Aug. 1, 2025, 6:15 p.m. | 49 minutes ago Description : …

CVE-2025-50870 - Institute-of-Current-Students Student Information Disclosure via Incorrect Access Control

CVE ID : CVE-2025-50870 Published : Aug. 1, 2025, 6:15 p.m. | 49 minutes ago Description : …

CVE-2025-50869 - Institute-of-Current-Students XSS

CVE ID : CVE-2025-50869 Published : Aug. 1, 2025, 6:15 p.m. | 49 minutes ago Description : …